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ABSTRACT 


Operational  protection,  one  of  six  operational  functions  that  support  the  successful 
employment  of  combat  forces,  is  one  of  the  foremost  responsibilities  of  an  operational 
commander.  In  every  military  operation,  operational  commanders  and  staffs  will  be  required 
to  plan  and  implement  operational  protection  measures,  the  process  of  which  should  include 
risk  management  procedures,  to  ensure  the  accomplishment  of  their  objectives.  Consisting  of 
multiple  elements,  each  component  of  operational  protection  must  be  synchronized  with  the 
other  components  to  achieve  a  synergistic  effect  that  creates  an  operational  advantage  by  the 
protection  of  the  friendly  center  of  gravity.  While  elements  of  the  concept  of  operational 
protection  exist  in  joint  publications,  this  operational  function  has  yet  to  be  fully  developed. 
The  components  of  operational  protection  that  are  strewn  throughout  various  joint  publications 
need  to  be  synthesized  into  coherent  guidance  for  the  operational  commander.  The  lack  of 
clear  and  coherent  doctrine  in  joint  publications  concerning  operational  protection  leads  to  a 
deficiency  in  incorporating  risk  management  procedures  for  an  operational  commander’s 
consideration  in  operational  design.  An  operational  commander’s  clear  understanding  of  what 
an  acceptable  level  of  risk  is  when  detennining  his  forces’  operational  protection  posture 
significantly  contributes  to  his  ability  to  exercise  operational  art  and  achieve  decisive  results. 

This  paper  identifies  the  missing  pieces  of  the  puzzle  concerning  operational  protection 
in  joint  doctrine  and  makes  the  following  recommendations:  joint  doctrine  needs  to 
consolidate  and  define  in  a  coherent  manner  the  operational  function  of  protection  and  codify 
it  in  a  JP  3-X  series  manual;  risk  management,  and  its  process,  must  be  identified  in  joint 
doctrine  as  an  essential  element  of  operational  protection;  an  Operational  Protection  Cell 
should  be  incorporated  into  joint  doctrine;  and  an  operational  protection  process  must  be 
defined  and  integrated  into  the  Joint  Operational  Planning  and  Execution  System  (JOPES). 
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Introduction 


In  Operation  Iraqi  Freedom  (OIF),  just  weeks  before  coalition  forces  attacked  into  Iraq 
to  remove  Saddam  Hussein’s  regime  from  power,  two  American  civilian  contractors  traveling 
in  an  automobile  were  shot  just  outside  the  Coalition  Force  Land  Component  Commander’s 
(CFLCC)  headquarters  at  Camp  Doha,  Kuwait  -  one  died  and  the  other  sustained  serious 
wounds.1  Also,  after  months  of  deploying  United  States  and  coalition  military  forces  to 
Kuwait  and  establishing  the  theater’s  protective  architecture,  on  20  March  2003  a  CSSC-3 
Seersucker  cruise  missile  impacted  only  600  yards  from  Camp  Commando,  the  headquarters 
for  the  1st  Marine  Expeditionary  Force  (I  MEF).2  A  week  later,  another  Seersucker  cruise 
missile  skimmed  across  the  water  along  the  seam  of  the  boundary  between  the  CFLCC  and  the 
Coalition  Force  Maritime  Component  Commander  (CFMCC)  areas  of  operation  and  detonated 
on  a  seawall  next  to  a  shopping  mall  in  Kuwait  City.  Because  the  missiles  narrowly  missed 
their  targets,  the  potential  negative  consequences  on  the  operation  are  mere  speculation; 
however,  these  incidents  indicate  that  there  are  potential  seams  in  operational  protection  that 
may  be  exploited  by  adversaries.  These  seams  can  be  traced  to  gaps  in  joint  doctrine. 

In  recent  years,  force  protection4  has  received,  and  continues  to  receive,  substantial 
attention  within  the  Department  of  Defense  (DoD).5  Following  the  terrorist  attack  on  the 
Khobar  Towers  complex  in  Dhahran,  Saudi  Arabia  on  25  June  1996,  which  left  nineteen  U.S. 
airmen  dead  and  hundreds  wounded,  former  Secretary  of  Defense  William  J.  Perry  stated  that 
the  attack  should  be  viewed  as,  “.  .  .  a  watershed  event  pointing  the  way  to  a  radically  new 
mindset  and  dramatic  changes  in  the  way  we  protect  our  forces  deployed  overseas  from  this 
growing  threat.”6  Indeed,  this  event  led  to  the  appointment  of  the  Downing  Commission,  a 
panel  tasked  by  the  Secretary  of  Defense  to  assess  the  facts  and  circumstances  surrounding  the 
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Khobar  Towers  incident  and  make  recommendations  on  how  to  prevent  this  type  of  incident 
from  happening  again.7  This  event  also  led  fonner  Chainnan  of  the  Joint  Chiefs  of  Staff, 

o 

General  John  Shalikashvili,  to  call  on  the  U.S.  military  to  make  force  protection  a  top  priority. 

However,  for  all  the  attention  given,  most  of  the  material  published  on  protection  is 
focused  on  the  tactical-level  and  deals  with  force  protection  or  antiterrorism,  which  are  only 
elements  of  operational  protection.  While  it’s  a  major  component  of  operational  protection, 
force  protection  does  not  cover  the  range  of  activities  and  measures  that  an  operational 
commander  must  employ  to  ensure  the  preservation  of  his  combat  power  for  decisive  actions.9 
The  increased  focus  on  force  protection  has  also  resulted  in  a  significant  investment  on 
emerging  force  protection  technologies.10  Although  technological  advances  are  helpful,  Joint 
Vision  2020  correctly  asserts  that  to  achieve  full  dimensional  protection,  “.  .  .  material 
superiority  alone  is  not  sufficient.  Of  greater  importance  is  the  development  of  doctrine  .  .  . 
and  people  to  take  advantage  of  the  technology.”11  It  is  precisely  the  purpose  of  this  paper  to 
fully  examine  joint  doctrine  in  terms  of  the  degree  to  which  it  codifies  operational  protection 
tactics,  techniques  and  procedures,  as  well  as  examine  the  vital  role  that  risk  management 
should  have  in  the  operational  protection  process.  While  pieces  of  the  concept  of  operational 
protection  exist  in  joint  publications,  these  pieces  of  the  puzzle  have  yet  to  be  interlocked  and 

synthesized  to  fully  define,  develop,  and  bring  into  focus  the  operational  function  of  protection 
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(see  Appendix  A). 

Thesis 

The  lack  of  clear  and  coherent  doctrine  in  joint  publications  concerning  operational 
protection  leads  to  a  deficiency  in  incorporating  risk  management  procedures  for  an 
operational  commander’s  consideration  in  operational  design.  An  operational  commander’s 
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clear  understanding  of  what  an  acceptable  level  of  risk  is  when  determining  his  forces’ 
operational  protection  posture  significantly  contributes  to  his  ability  to  exercise  operational  art 
and  achieve  decisive  results. 

Scope  and  Methodology 

Although  many  of  the  comments  within  this  paper  apply  to  military  operations  other 
than  war  (MOOTW),  the  focus  of  this  paper  will  address  operational  protection  as  it  applies  to 
major  combat  operations.  This  study  will  establish  the  definition  of  operational  protection, 
assert  its  importance  to  the  combatant  commander,  and  will  offer  a  review  of  what  joint 
doctrine  currently  articulates  about  operational  protection  and  its  symbiotic  relationship  with 
risk  management.  Following  the  review  of  joint  doctrine,  this  paper  will  analyze  other 
sources,  such  as  DoD  directives,  in  order  to  fill  in  gaps  identified  in  joint  doctrine.  The  paper 
then  addresses  counterarguments  and  concludes  with  recommendations. 

Definition  of  Operational  Protection 

The  concept  of  operational  protection  is  best  articulated  in  Dr.  Milan  Vego’s  book, 

Operational  Warfare.  Although  not  joint  doctrine,  he  defines  operational  protection  as: 

In  the  broad  definition,  the  term  operational  protection  pertains  to  a  series  of  actions  and  measures 
conducted  in  peacetime,  crisis,  and  war,  and  designed  to  preserve  effectiveness  and  survivability  of  one’s 
military  and  nonmilitary  sources  of  power  deployed  within  the  boundaries  of  a  given  theater. 13 

Dr.  Vego  goes  on  to  say  that  operational  protection  is  one  of  six  operational  functions  that 
support  the  successful  employment  of  combat  forces.14  Operational  protection  includes  both  a 
process  -  assess  the  threat,  detennine  friendly  vulnerabilities,  employ  the  risk  management 
process,  establish  priorities  for  protection  -  and  the  employment  of  combat  forces  to  protect 
against  the  threat.  It  includes  the  following  principal  components:  collection  of  intelligence 
for  indicators  and  warning  (I&W);  air  defense;  airspace  control;  force  protection;  protection  of 
information  systems;  protection  of  logistics  infrastructure;  defense  against  weapons  of  mass 


3 


destruction  (WMD)  /  nuclear,  biological,  and  chemical  (NBC)  agents;  air  base  ground  defense 
and  rear  area  defense;  operations  security  (OPSEC)  and  physical  security;  operational 
deception;  protection  from  terrorist  acts;  protection  of  U.S.  citizens  and  other  noncombatants; 
antisubmarine  warfare;  defense  of  the  coast  and  coastal  waters;  defensive  mining  and  mine 
countermeasures.15  However,  this  description  omits  the  idea  that  risk  management  should  play 
a  critical  role  in  the  operational  function  of  protection.  Dr.  Vego  asserts  that  an  essential 
element  of  the  concept  of  operational  protection  is  that,  “no  component  of  operational 
protection  stands  alone;  each  must  be  fully  integrated  with  other  elements  to  be  fully 
effective.”16  With  so  many  components  of  operational  protection,  they  will  not  synchronize 
themselves;  rather  it  will  take  a  deliberate  process  to  successfully  employ  operational 
protective  measures  in  a  theater.  Each  component  of  operational  protection  must  be 
synchronized  with  the  other  components  to  achieve  a  synergistic  effect  that  creates  an 
operational  advantage  by  the  protection  of  the  friendly  center  of  gravity  (COG);  however,  joint 
doctrine  does  not  synchronize  these  components  of  operational  protection,  rather  it  addresses 
them  separately. 

The  Importance  of  Operational  Protection  to  the  Combatant  Commander 

Operational  protection  is  one  of  the  foremost  responsibilities  of  combatant 
commanders  and  commanders  at  all  levels.  For  his  article  in  The  Army  Lawyer,  Major 
Thomas  W.  Murrey,  Jr.,  USAF,  conducted  a  comprehensive  study  of  force  protection 
responsibilities  following  the  Khobar  Towers  bombing  and  concluded  that,  “although  DOD 
policy  is  that  force  protection  is  the  responsibility  of  anyone  in  a  command  position,  the 
geographic  CINC  [combatant  commander]  is  the  only  DOD  figure  who  is  given  force 
protection  responsibility  by  statute.”  Only  the  combatant  commander  has  the  resources  to 
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integrate  all  components  of  operational  protection  within  a  theater  of  operations,  and  is  also  in 
a  position  to  resource  and  facilitate  subordinates’  implementation  of  protective  measures. 

A  combatant  commander’s  application  of  operational  art  should  dictate  the  planning, 
synchronization  and  execution  of  all  of  the  components  of  operational  protection.  Every 

military  operation  requires  operational  commanders  and  staffs  to  plan  and  implement 
operational  protection  measures  to  ensure  the  accomplishment  of  their  objectives.  Joint 
Publication  (JP)  3-0,  Doctrine  for  Joint  Operations,  states  that  Joint  Force  Commanders 
(JFCs)  employ  operational  art  to  achieve  decisive  results  in  the  shortest  time  possible  and  with 
minimal  casualties.19  It  follows  that  operational  protection  is  critical  to  the  JFC’s  planning  and 
execution  in  order  to  minimize  casualties.  Operational  commanders  must  strive  to  make  the 
operational  protection  process  more  effective,  including  the  application  of  risk  analysis  and 
risk  mitigation  as  measures  to  gauge  acceptable  levels  of  risk  and  minimize  casualties.  It’s  the 
operational  commander’s  willingness  to  apply  combat  power  in  the  midst  of  taking  defined 
risks,  confident  that  mitigating  factors  have  been  established  throughout  the  theater  to 
sufficiently  protect  his  COG  and  other  priority  assets,  which  enable  him  to  apply  the  right 
force  at  the  decisive  time  and  place. 

Although  not  joint  doctrine,  the  Air  Fand  Sea  Application  Center’s  manual,  Risk 
Management,  correctly  identifies  the  importance  of  the  inter-relationship  between  operational 
protection  and  risk  management  (RM)  that  an  operational  commander  must  apply  to  every 
major  operation  -  “Deploying  and  employing  the  joint  force  generates  concerns  in  force 
protection  and  balancing  risk  against  resource  constraints.”  With  limited  resources,  the 
combatant  commander  must  prioritize  what  gets  protected,  and  to  what  degree.  Former 
Secretary  of  Defense  Perry  understood  that  not  everything  can  receive  full  protection  -  “The 
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task  of  protecting  our  forces  would  be  easy  if  we  were  willing  to  abandon  or  compromise  our 
missions,  but  that  is  not  an  option.”  Therefore,  combatant  commanders  must  apply  RM 
procedures  as  part  of  synchronizing  operational  protection  components  throughout  the  theater. 

What  Joint  Doctrine  says  about  Operational  Protection  /  Analysis  of  Shortfalls 

Although  not  a  publication  that  prescribes  joint  doctrine,  an  examination  of  Joint 

Vision  2020  is  necessary  since  it  establishes  the  conceptual  foundation  for  the  development  of 

joint  doctrine.  One  of  its  four  main  concepts,  full  dimensional  protection,  does  adequately  set 

the  foundation  for  the  development  of  joint  doctrine  concerning  operational  protection. 

Full  dimensional  protection  is  the  ability  of  the  joint  force  to  protect  its  personnel  and  other  assets  required  to 
decisively  execute  assigned  tasks.  Full  dimensional  protection  is  achieved  through  the  tailored  selection  and 
application  of  multilayered  active  and  passive  measures,  within  the  domains  of  air,  land,  sea,  space,  and 
information  across  the  range  of  military  operations  with  an  acceptable  level  of  risk.22 

Importantly,  Joint  Vision  2020  introduces  the  concept  of  associating  risk  management  with  the 
process  of  operational  protection  -  “Commanders  will  thoroughly  assess  and  manage  risk  as 
they  apply  protective  measures  to  specific  operations,  ensuring  an  appropriate  level  of  safety, 
compatible  with  other  mission  objectives,  is  provided  for  all  assets.”'  Lastly,  it  articulates  the 
desired  end  state  concerning  full  dimensional  protection  for  the  JFC  as  an  integrated 
architecture  for  protection,  which  effectively  manages  risk  to  the  force.24  As  will  be 
demonstrated  below,  current  joint  doctrine  is  deficient  in  clearly  articulating  and  developing 
the  key  linkage  between  operational  protection  and  operational  risk  management.  Despite  this 
conceptual  foundation,  combatant  commanders  require  joint  doctrine  to  achieve  the  desired 
end  state  outlined  in  JV  2020  and  transfonn  this  vision  into  a  reality. 

At  the  top  of  the  hierarchy  of  joint  doctrine,  JP  l,  Joint  Warfare  of  the  Armed  Forces  of 
the  United  States,  outlines  force  protection  as  an  “enduring  enabler”  to  the  “enduring 
concepts,”  which  are  guidelines  that  define  the  force  posture  required  to  accomplish  missions. 
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The  brief  discussion  on  force  protection  is  very  vague,  and  offers  little  substantive  information 

25 

to  a  combatant  commander. 

Next  in  the  hierarchy  of  joint  doctrine  is  JP  3-0,  Doctrine  for  Joint  Operations,  which 
also  does  not  adequately  address  operational  protection.  In  chapter  III,  “Planning  Joint 
Operations,”  which  describes  strategic  and  operational  planning,  operational  art,  and  key 
planning  considerations,  operational  protection  is  not  mentioned  at  all.  Several  components  of 
operational  protection  are  listed  as  “other  planning  considerations,”  such  as  risk,  deception  and 
OPSEC;  however,  the  description  given  to  these  planning  considerations  is  extremely  vague 
and  does  not  infer  their  relationship  to  operational  protection."  In  chapter  IV,  “Joint 
Operations  in  War,”  protection  is  listed  as  a  consideration  during  three  phases  of  joint 
operations.  The  most  detailed  discussion  on  protection  occurs  when  outlining  considerations 
at  the  outset  of  combat,  where  protection  is  described  as  having  four  components:  protection 
from  the  enemy’s  firepower  and  maneuver;  health,  welfare,  morale  and  maintenance;  safety; 
prevention  of  fratricide."  Lastly,  “protection”  is  mentioned  as  a  consideration  when  planning 
multinational  operations,  and  points  out  that  JFCs  should  consider,  “air  defense,  defensive 
counterair,  reconnaissance  and  surveillance,  and  security  measures  for  the  force  ...”  as  well  as 
NBC  and  fratricide  avoidance."  These  excerpts  only  discuss  force  protection  and  make  no 
reference  to  the  fact  that  it  is  only  one  component  of  operational  protection.  From  the 
scattered  mention  of  “protection”  in  JP  3-0,  one  can  deduce  that  protection  is  comprised  of 
various  elements;  however,  this  listing  is  incomplete  and  does  not  articulate  the  concept  that  a 
combatant  commander  must  synchronize  these  various  components  into  a  theater-wide 
operational  protection  plan  that  provides  for  the  protection  of  his  COG  and  applies  risk 
management  to  the  operational  protection  process  to  ensure  that  the  right  amount  of  forces  are 
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applied  to  protection  versus  combat  missions.  In  addressing  the  fundamentals  of  joint 
operations,  JP  3-0  does  state  that  operational  art  requires  commanders  to  answer  several 
questions,  among  them,  “What  is  the  likely  cost  or  risk  to  the  joint  force  in  perfonning  that 
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sequence  of  actions?”'  This  directs  commanders  to  assess  risk,  but  does  not  articulate  the 
process  to  do  so  and  does  not  link  it  to  the  concept  of  operational  protection. 

The  next  joint  publications  that  will  be  examined  are  the  JP  5-0  series,  which  discuss 
the  doctrine  for  planning  joint  operations.  As  the  keystone  document  that  establishes  the 
fundamental  principals  and  doctrine  for  joint  planning,  JP  5-0,  Doctrine  for  Planning  Joint 
Operations,  says  surprisingly  little  about  operational  protection.  Its  only  mention  of  protection 
or  risk  management  is  that  protection  is  listed  as  a  fundamental  in  employment  and  campaign 
planning.30 

Although  only  briefly  mentioned,  JP  5-00.1 ,  Joint  Doctrine  for  Campaign  Planning,  is 
the  only  joint  doctrinal  manual  that  uses  the  term  “operational  protection”  versus  “force 
protection.”  In  a  discussion  of  detennining  critical  factors  and  identifying  centers  of  gravity, 

JP  5-00.1  states  that  COGs  must  be  protected  and  that, 

In  conducting  an  analysis  of  friendly  vulnerabilities,  the  combatant  commander  must  decide  how,  when, 
where,  and  why  his  or  her  forces  are  (or  might  become)  vulnerable  to  hostile  actions,  and  then  plan 
accordingly.  This  planning  goes  well  beyond  force  protection.  The  combatant  commander  must  achieve  a 
balance  between  prosecuting  the  main  effort  and  providing  operational  protection.  In  providing  operational 
protection,  the  combatant  commander  should  focus  attention  on  and  assign  adequate  forces  and  assets  to  the 
most  essential  elements  in  theater  to  protect  friendly  COGs.31 

This  is  the  clearest  articulation  of  the  operation  function  of  protection  in  joint  doctrine.  It 
incorporates  the  key  idea  of  centering  operational  protection  around  the  protection  of  the 
friendly  COG,  and  correctly  identifies  that  this  operational  function  is  more  than  just  force 
protection;  however,  these  are  macro-level  thoughts  with  no  articulation  on  the  process  of 
implementing  operational  protection  throughout  the  theater,  or  even  defining  the  various 
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components  of  operational  protection  that  a  combatant  commander  must  employ.  The  concept 
of  risk  management  is  implied  in  the  above  statement  when  discussing  the  fact  that  the 
combatant  commander  must  balance  between  mission  accomplishment  and  operational 
protection.  This  thought  should  be  further  developed  and  the  process  defined  in  order  to  assist 
the  combatant  commander  in  implementing  operational  protection. 

JP  5-00.2,  Joint  Task  Force  Planning  Guidance  and  Procedures,  provides  some 
guidance  on  force  protection  and  risk  management,  but  does  so  in  a  disjointed  manner  and 
does  not  capture  the  concept  that  protection  is  an  operational  function  that  must  be  planned  in 
detail  at  the  operational  level.  The  publication  acknowledges  that  the  JFC  has  the 
responsibility  for  “establishing  force  protection  policies  and  guidelines.”32  However,  a  large 
portion  of  the  document  describes  the  roles  and  responsibilities  for  staff  sections  of  a  JTF 
headquarters,  and  provides  helpful  checklists  to  guide  staff  officers  in  planning  and  carrying 
out  their  responsibilities,  yet  the  reference  to  force  protection  responsibilities  for  any  staff 
section  is  severely  lacking.  The  J-3  and  J-5  checklists  make  no  mention  of  operational 
protection,  and  the  J-2  checklist  confines  its  discussion  to  detennining  if  counter-intelligence 
has  been  incorporated  as  a  force  protection  measure.  Further,  the  checklist  on  Crisis  Action 
Planning  makes  no  coherent  reference  to  the  operational  function  of  protection,  despite  the  fact 
that  there  are  components  of  operational  protection  listed,  such  as  theater  missile  defense, 
military  deception,  and  OPSEC.34  Chapter  VII,  “Joint  Task  Force  Operations,”  lists  force 
protection  as  “another  operational  planning  consideration,”  and  is  the  first  place  in  joint 
doctrine  that  provides  a  definition  of  force  protection.  It  outlines  the  following  considerations 
for  force  protection:  protection  from  the  enemy’s  maneuver  and  firepower;  health,  welfare,  and 
morale;  safety;  prevention  of  fratricide;  rules  of  engagement  (ROE);  and  individual 
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awareness.  This  list  closely  resembles  the  list  of  force  protection  considerations  in  JP  3-0, 
with  the  exception  of  ROE  and  individual  awareness;  however,  these  by  no  means  encompass 
all  the  components  of  operational  protection.  Another  operational  planning  consideration 
listed,  but  with  no  connection  to  force  protection,  is  risk  management  (RM).  Although  the 
discussion  is  extremely  short,  this  is  the  only  place  in  joint  doctrine  that  defines  RM  and  the 
process  involved.  In  sum,  JP  5-00.2  fails  to  associate  force  protection  as  a  piece  of  the  larger 
operational  function  of  protection.  While  it  does  discuss  some  general  considerations  on  force 
protection  and  briefly  defines  the  risk  management  process,  it  does  not  assign  any  JTF  staff 
section  the  responsibility  to  conduct  these  activities.  The  gaps  created  in  joint  planning 
doctrine  by  the  inability  to  tie  these  thoughts  on  force  protection  and  risk  management  with 
other  components  of  operational  protection  may  lead  to  seams  as  the  operational  commander, 
and  his  staff,  attempt  to  plan  and  synchronize  the  components. 

JP  3-07.2,  Joint  Tactics,  Techniques  and  Procedures  for  Antiterrorism,  addresses 
antiterrorism  (AT)  in  detail  and  correctly  identifies  the  relationship  with  force  protection  as, 
“AT  is  a  sub-element  of  combating  terrorism,  which  is  one  of  the  four  pillars  of  a  broader 
concept  called  force  protection.”  Therefore,  the  focus  of  this  publication  is  three  levels 
below  operational  protection  -  AT  is  the  defensive  component  of  combating  terrorism,  which 
is  a  component  of  force  protection,  which  is  a  component  of  operational  protection.  With  that 
said,  this  publication  does  provide  some  insights  pertinent  to  the  operational  function  of 
protection.  First,  it  addresses  combatant  commander  responsibilities  for  AT,  some  of  which 
are  important  to  synchronizing  operation  protection,  such  as  assessing  the  terrorist  threat, 

38 

prescribing  AT  training  requirements,  and  incorporating  host  countries  into  AT  measures. 
Second,  it  also  addresses  the  AT  concept  and  program  -  “The  AT  program  concept  represents 
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an  integrated,  comprehensive  approach  within  combatant  commands  ...  to  counter  the 
terrorist  threat  to  installations,  bases,  ships,  facilities,  equipment,  and  personnel.”  This  is 
good,  and  a  piece  of  the  puzzle,  but  what  is  really  needed  is  an  integrated,  comprehensive 
approach  within  combatant  commands  to  establish  operational  protective  measures,  and  not 
just  AT  measures,  throughout  the  theater,  ensuring  priority  protection  to  the  friendly  COG 
while  simultaneously  applying  the  risk  management  process  in  order  to  take  calculated  risks 
on  the  protective  posture  of  other  assets.  Also,  many  of  the  AT  program  elements  described  in 
this  publication  have  applicability  to  an  operational  protection  process.40  Third,  this 
publication  outlines  the  DoD  Threat  Condition  (THREATCON)  system  and  procedures,  now 
called  force  protection  conditions  (FPCONs).41  FPCONs  are  specifically  geared  toward 
countering  terrorist  threats  and  primarily  address  measures  that  concern  bases  and 
installations;  however,  they  should  be  expanded  to  include  all  threats  against  the  theater,  not 
just  terrorist  activities,  and  the  reactive  measures  should  be  expanded  to  include  all 
components  of  operational  protection. 

Fastly,  there  are  eleven  other  joint  doctrinal  publications  that  address  components  of 
operational  protection.42  A  thorough  review  of  these  documents  reveals  that  the  overriding 
theme  is  that  they  make  no  mention  of  how  their  respective  topic  relates  to,  or  even  supports, 
operational  protection.  These  components  need  to  be  synthesized  in  a  manual  that  describes 
their  relationship  to  an  operational  protection  process  that  enables  a  combatant  commander  to 
synchronize  these  elements,  apply  risk  management  procedures  and  implement  an  integrated 
protection  architecture  throughout  the  theater. 
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Analysis  of  what  other  Documents  say  about  Operational  Protection 

Several  documents  outside  of  joint  doctrinal  manuals  exist  that  also  offer  pieces  to  the 
puzzle  of  operational  protection.43  Though  no  one  document  fully  describes  the  operational 
function  of  protection,  they  do  offer  some  pertinent  thoughts  that  should  be  incorporated  into 
joint  doctrine  in  order  to  codify  the  concept. 

An  important  document  that  describes  the  symbiotic  relationship  between  operational 
protection  and  risk  management  (RM)  is  the  Air  Land  Sea  Application  Center’s,  Risk 
Management.  Although  this  publication  does  have  some  applicability  at  the  operational  level 
of  war,  this  publication  “provides  multi-service  tactics,  techniques,  and  procedures  for  tactical 
level  [emphasis  mine]  risk  management  in  the  planning  and  execution  of  operations  in  a  joint 
environment.”44  This  manual  clearly  articulates  the  important  inter-relationship  between  force 
protection  and  risk  management: 

The  commander  has  the  dilemma  of  weighing  mission  requirements  and  force  protection  measures.  One  of 
his  primary  tools  for  weighing  mission  and  protection  is  reconciled  in  assessing  and  balancing  risk.  This 
process  forms  a  direct  relationship  between  force  protection  and  risk  management  [emphasis  mine].  In  the 
force  protection  process,  we  consider  three  elements:  planning,  operations,  and  sustainment.  Risk 
management  enables  the  force  protection  process  by  using  risk  assessment  and  controls  in  each  element.45 

A  critical  element  of  the  above  quote  is  that  force  protection  is  a  process  and  must  be 
thoroughly  planned  and  supported  by  risk  management  procedures.  This  concept  must  be 
integrated,  and  further  developed  into  joint  doctrine,  specifically  the  JP  5-0  series  publications. 
This  publication  also  highlights  two  other  areas  that  have  a  direct  impact  on  operational 
protection  and  should  be  incorporated  into  joint  doctrine.  First,  in  its  discussion  on  the  third 
step  of  the  RM  process  -  Developing  Controls  -  the  manual  provides  good  insight  into  the 
operational  controls  available  to  a  commander.  Although  not  specifically  listed  as  controls 
related  to  operational  protection,  many  of  the  examples  listed  do  pertain  -  pace  of  the 
operation,  battlefield  controls,  rules  of  engagement,  airspace  control  measures,  and  training.46 
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This  concept  must  be  expanded  in  joint  doctrine  because  it  captures  the  idea  of  implementing 

the  components  of  operational  protection  in  a  fonnalized  process  designed  to  reduce  risks. 

Second,  Risk  Management  provides  insight  into  a  mechanism  to  manage  and  oversee 

operational  protection  planning  and  implementation  by  suggesting  the  establishment  of  a  Force 

Protection  Working  Group  (FPWG)  to  review  threats,  identify  vulnerabilities,  and  recommend 

countermeasures.47  Although  the  formation  of  another  cell  or  group  is  always  painful,  the  idea 

of  forming  a  group,  board,  or  cell  to  plan  and  implement  operational  functions  is  not  without 

precedent.  For  example,  of  the  doctrinal  centers,  boards,  and  cells  defined  in  JP  5-00.2,  the 

Joint  Targeting  Coordination  Board  oversees  operational  fires.  Further,  for  the  first  time,  an 

Operational  Protection  Cell  was  established  by  the  CFLCC  for  Operation  Iraqi  Freedom: 

Upon  assuming  command  of  CFLCC,  LTG  McKiernan  reorganized  the  staff  away  from  traditional 
stovepiped  staff  functions  and  toward  a  staff  executing  integrated  operational  functions. ...  The  three  sub¬ 
functions  -  NBC  defense,  force  protection  and  Theater  Air  and  Missile  Defense  were  combined  to  form 
operational  protection  and  were  placed  under  the  oversight  of  BG  Bromberg,  CG,  32d  AAMDC  [Army  Air 
and  Missile  Defense  Command].  The  CFLCC  staff  formed  a  Command  Operational  Protection  Cell  (COP- 
C).49 

Ironically,  the  recommended  composition  for  a  FPWG  outlined  in  Risk  Management  excluded 
both  an  air  defense  representative  and  a  military  police  representative,  while  the  Commander, 
CFLCC  (COMCFLCC)  designated  the  senior  air  defense  commander  in  theater  to  lead  the 
COP-C.  Its  core  membership  was  a  combination  of  military  police,  NBC,  and  air  defense, 
supplemented  by  representatives  from  the  CFLCC  C-2,  C-3  and  C-7.  Key  tasks  performed  by 
the  COP-C  were  vulnerability  assessments  of  the  CFLCC  area  of  responsibility,  information 
briefs  to  the  COMCFLCC  on  the  risk  to  High  Value  Assets  (HVAs)  within  the  AOR,  and 
recommendations  on  the  allocation  of  combat  power  to  protect  HVAs.50  The  COP-C  proved 
successful  in  synchronizing  operational  protection  issues  within  CFLCC.51  While  these  efforts 
are  excellent  at  the  component  level,  the  combatant  commander  must  also  apply  the  same  rigor 
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and  techniques  at  his  level  to  establish  theater-wide  operational  protection  to  ensure  that  seams 
do  not  exist  between  the  CFLCC  and  CFMCC,  for  example. 

The  Universal  Joint  Task  List  ( UJTL )  serves  as  a  common  language  and  reference 
system  for  JFCs  to  derive  training  requirements.  "  Although  the  UJTL  is  geared  to  be  a 
training  reference  versus  a  doctrinal  manual,  it’s  structured  in  a  manner  that  could  provide  the 
foundation  for  the  development  of  joint  doctrine  on  the  operational  function  of  protection.  To 
begin  with,  the  UJTL  aligns  tasks  into  operational  functions.  It  is  also  the  only  document 
produced  by  the  joint  staff  to  provide  a  definition  of  operational  force  protection.54  This 
definition  focuses  on  protecting  the  force’s  combat  power  for  the  decisive  time  and  place,  and 
connotes  a  broader  range  of  influence  than  the  definitions  of  force  protection  outlined  above. 
Additionally,  a  review  of  the  supporting  tasks  listed  under  operational  force  protection  in  the 
UJTL  reveals  a  similar  listing  of  tasks  and  actions  outlined  in  Dr.  Vego’s  Operational 
Warfare',  however,  there  are  three  significant  shortfalls.55  First,  the  UJTL  does  not  list 
“collection  of  intelligence  for  indications  and  warnings”  as  part  of  operational  protection.  This 
is  a  critical  deficiency  because  the  threat  assessment  feeds  an  assessment  of  vulnerabilities, 
which  are  vital  in  the  planning  of  operational  protection.  Second,  the  UJTL  does  not  list 
combating  terrorism  as  a  supporting  task  for  operational  protection.  This  is  a  glaring  shortfall. 
Antiterrorism  is  an  integral  component  of  operational  protection,  especially  in  today’s 
environment  where  it  is  one  of  the  biggest  threats  to  the  protection  of  forces  and  bases  in  the 
Joint  Rear  Area.  Third,  the  UJTL  does  not  indicate  the  inter-relationship  between  operational 
protection  and  risk  management.  Yet,  despite  these  shortfalls,  the  UJTL  would  serve  as  a  good 
start  point  for  the  development  of  joint  doctrine  on  operational  protection  in  terms  of 
definitions  and  groupings  of  tasks. 
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The  last  documents  to  be  examined  are  DoD  Directive  2000.12,  DoD  Antiterrorism 
(AT)  Program,  and  DoD  Instruction  2000.16,  DoD  Antiterrorism  Standards.  Antiterrorism  is 
only  one  piece  of  force  protection,  which  is  only  one  piece  of  operational  protection;  however, 
there  are  some  important  lessons  in  these  documents  that  can  be  applied  to  the  development  of 
joint  doctrine  for  operational  protection.  As  the  document  that  defines  the  DoD  AT  program, 
DoD  Directive  2000.12  defines  antiterrorism  responsibilities  for  many  agencies,  but  in 
particular,  for  the  geographic  combatant  commanders.56  These  responsibilities  should  be 
expanded  to  encompass  the  entire  operational  function  of  protection  and  codified  in  joint 
doctrine. 

DoD  Instruction  2000.16  lists  standards  for  combatant  commanders  to  adhere  to  when 
implementing  antiterrorism  programs.  Pertinent  to  this  paper  is  the  codification  of  the 
elements  of  an  AT  Plan  —terrorism  threat  assessment,  vulnerability  assessment,  risk 
assessment,  AT  physical  security  measures,  terrorist  incident  response  measures,  and  terrorist 
consequence  management  measures.57  Building  on  the  analysis  and  recommendations  above 
concerning  the  implementation  of  an  Operational  Protection  Cell  to  manage  and  synchronize 
the  planning  process,  employ  risk  management  procedures  within  the  operational  protection 
process,  and  recommend  employment  of  the  components  of  operational  protection  listed  in  the 
UJTL  and  outlined  by  Dr.  Vego,  the  elements  of  the  AT  Plan  should  be  expanded  beyond  just 
an  AT  focus  and  incorporated  into  joint  doctrine  to  form  the  foundation  for  an  operational 
protection  process.  Using  this  methodology,  a  proposed  operational  protection  process  is 
depicted  below,  which  enables  the  operational  commander  to  employ  the  components  of 
operational  protection  to  specific  High  Value  Assets  within  a  formalized  process  that  ensures 
he  has  a  clear  understanding  of  what  risks  he  is  accepting  across  the  theater  (see  Appendix  B). 
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OPERATIONAL  PROTECTION  PROCESS 

PHASES  OF  THE  OPERATION 


Execution 


.  INCIDENT 

.  CONSEQUENCE 

RESPONSE  ■ 

MANAGEMENT 

'  MEASURES 

'  MEASURES 

Establish  Priorities  of  Protection 
for  High  Value  Assets  (HVAs) 
(i.e.  —  what  gets  protected,  and  what  is 
determined  acceptable  risk  for  an  asset) 


FUNCTIONS: 

•  Plan  /  Manage  /  Oversee  Operational  Protection  Process 

•  Synchronize  components  of  Operational  Protection  to 
achieve  synergistic  effects,  resulting  in  an  integrated 
jjrotectioiuuxhitectun^hroughouUh^Theater^^^^^^ 
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•  Airspace  Control 

•  Aircraft  &  Cruise 
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•  Ballistic  Missile 
Defense 

•  Provide  TBM  Early 
Warning 


CRITICAL  ASSET 

PROTECTION 

•COG 

•  Rear  Area  Defense 

•  Protection  of  Logistics 
Infrastructure 

•DoD  Bases  &  Facilities 

•  Designated  Civil 
Infrastructure 

•  Decontamination  of  assets 
after  NBC  attack 

•  Restoration  of  essential 
services 


OPERATIONAL  FORCES. 

MEANS.  & 
NONCOMBATANTS 

•  Force  Protection 

•  Combating  Terrorism 

•  OPSEC 

•  Protection  of  US  Citizens  / 
Noncombatants 

•  Ground  Base  Defense 

•  Defense  against  WMD  /  NBC 

•  Individual  Protection 

•  Collective  Protection 

•  Consequence  Management 


INFORMATION 
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•  Protection  of 
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MARITIME  DEFENSE 

•  Mine  Clearing 

•  Anti-Surface  Warfare 

•  Maritime  Interception 
Operations 

•  Defense  of  the  Coast  and 
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Components  of 
Operational 
Protection 


Controls  &  Tools  for  the 
Combatant  Commander 
to  Mitigate  Risk  and 
establish  a  protection 
architecture  in  theater 


Figure  1  -  Proposed  Operational  Protection  Process 


Counterarguments 

There  are  two  major  counterarguments  that  may  arise  against  the  assertion  that  the  lack 
of  clear  and  coherent  doctrine  in  joint  publications  concerning  operational  protection  leads  to  a 
deficiency  in  incorporating  risk  management  procedures  for  an  operational  commander’s 
consideration  in  operational  design.  The  first  counterargument  is  that  joint  doctrine  addresses 
the  operational  function  of  protection  sufficiently,  to  include  its  inter-relationship  with  risk 
management.  In  fact,  some  have  argued  that,  “application  of  the  tenets  of  operational  art 
provide  the  campaign  planner  the  greatest  means  of  protecting  the  force  at  the  strategic  and 
operational  levels.”  The  premise  of  this  argument  is  that  nine  of  the  sixteen  tenets  of 
operational  art  directly  relate  to  force  protection,  and  these  should  be  sufficient  guides  towards 
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implementing  operational  protection  throughout  the  theater.59  While  these  tenets  may  have 
applicability  to  operational  protection,  they  also  have  applicability  to  several  other  operational 
functions.  Because  operational  art  translates  the  JFC’s  strategy  into  operational  design,  it  must 
be  supported  with  joint  doctrine  to  outline  the  process.  With  multiple  operational  functions  to 
synchronize,  the  combatant  commander  and  his  staff  require  the  codification  of  thoughtful 
guidelines  on  how  to  plan  and  execute  operational  protection.  As  outlined  above  in  the 
analysis  of  joint  doctrine,  there  is  currently  no  one  doctrinal  manual  that  describes  the 
operational  function  of  protection  and  the  process  for  planning  and  synchronizing  the  various 
components  of  operational  protection  throughout  a  theater.  As  several  researchers  on 
operational  protection  have  concluded,  “the  foundation  for  the  DOD  force  protection  program 
is  a  scattered  mishmash  of  messages,  agreements,  statutes  and  regulations.”60  In  order  to 
prevent  gaps  or  seams  in  the  theater’s  operational  protection  plan,  the  pieces  of  the  operational 
protection  puzzle  must  be  put  together  in  one  joint  doctrinal  document.  Sole  reliance  on  a 
commander’s  application  of  operational  art  without  a  doctrinal  foundation  is  not  a  recipe  for 
success.  In  sum,  upon  analyzing  the  need  to  further  develop  the  operational  function  of 
protection,  “[wjhat  becomes  clear  is  that  FP  [force  protection]  is  more  than  security,  and  the 
process  to  accomplish  the  task  successfully  requires  proactive,  deliberate  action.  It  is  a  process 
that  entails  planning  for  the  application  of  military  assets  to  minimize  the  effects  of  hazards 
and  hostile  activities  that  can  impair  friendly  force  effectiveness.”61 

The  second  counterargument  is  that  there  is  too  much  attention  on  force  protection  and 
it  has  become  prioritized  above  the  operational  objective.  In  his  2001  article  for  Military 
Review,  LTC  Richard  R.  Caniglia,  U.S.  Army,  examined  force  protection  procedures  in  Bosnia 
and  asserted  that: 
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The  inevitable  rise  of  institutional  structures  produces  staff  officers  with  checklists,  risk-assessment 
methodologies  and  force-protection  paragraphs  in  orders.  Force  protection  rises  to  the  status  of  a  mission 
from  its  traditional  role  as  a  responsibility.  Institutionalizing  force  protection  has  become  a  cottage  industry 
in  the  US  military:  it  now  consumes  resources  and  affects  events.62 

As  this  author  points  out,  force  protection  is  not  only  a  responsibility,  but  it’s  also  a  mission. 

A  mission,  commonly  defined  as  a  task  and  purpose,  is  an  appropriate  term  to  use  for 
operational  protection.  As  discussed  above,  the  UJTL  establishes  the  task  of  operational  force 
protection.  So  to  imply  that  force  protection  should  not  be  a  mission  is  inaccurate.  Everyone 
acknowledges  that,  “the  mission  will  always  need  to  be  accomplished  and  will  always 
represent  the  overriding  purpose.  ...  At  the  same  time  the  force  must  be  protected.”  And  in 
order  for  the  mission  to  be  accomplished,  it  requires  the  protection  of  the  friendly  COG.  It  is 
precisely  the  doctrine,  checklists  and  risk  assessment  methodologies  ridiculed  above  that 
enable  the  combatant  commander  to  determine  the  level  of  risk  he  is  willing  to  accept,  and 
synchronize  the  various  components  of  operational  protection  that  will  enable  him  to  apply 
decisive  combat  power  at  the  right  place  and  time. 

Recommendations 

First,  joint  doctrine  needs  to  be  consolidated  and  defined  in  a  coherent  manner  that 
articulates  the  operational  function  of  protection.  That  doctrine  should  be  codified  in  a  JP  3-X 
series  manual.  As  outlined  in  Appendix  A,  currently  the  pieces  of  the  operational  protection 
puzzle  are  scattered  through  multiple  joint  doctrinal  manuals,  and  even  if  combined,  the  pieces 
would  not  form  a  complete  picture.  Several  documents  that  will  be  essential  to  incorporate 
into  joint  doctrine  on  the  operational  function  of  protection  are  Air  Land  Sea  Application 
Center’s,  Risk  Management,  the  UJTL,  DoD  Directive  2000.12,  and  DoD  Instruction  2000.16. 

Second,  risk  management  must  be  identified  in  joint  doctrine  as  an  essential  element  of 
operational  protection.  The  linkage  between  operational  protection  and  risk  management  is 
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crucial,  yet  not  well  articulated  in  current  joint  doctrine.  Air  Land  Sea  Application  Center’s, 
Risk  Management  should  be  re-worked  as  an  operational-level  document  and  incorporated  into 
joint  doctrine  as  part  of  the  operational  protection  function.  Additionally,  step  three  of  the  risk 
management  process,  develop  controls,  should  outline  the  operational  protective  measures  that 
the  combatant  commander  can  influence. 

Third,  the  Operational  Protection  Cell  should  be  incorporated  into  joint  doctrine  in  JP 
5-00.2,  chapter  VII,  paragraph  4,  “Centers,  Boards,  and  Cells.”  As  discussed  above,  the  value 
added  at  the  component  level  at  CFLCC  during  OIF  was  significant.  The  ability  of  the 
CFLCC  operational  protection  cell  to  synchronize  operational  protection  activities  in  the 
planning,  deployment  and  execution  phases  produced  a  synergistic  affect  that  preserved  the 
CFLCC ’s  COG  (V  Corps)  despite  various  Iraqi  attacks.  While  successful  at  the  CFLCC  level, 
this  cell  also  needs  to  be  implemented  at  the  combatant  commander  level  in  order  to  ensure 
that  adversaries,  as  discussed  in  the  introduction,  do  not  exploit  the  potential  seams  between 
component  commands. 

Fourth,  an  operational  protection  process  that  includes  risk  management  procedures 
must  be  defined  and  integrated  into  the  joint  planning  process.  One  of  the  documented  lessons 
learned  from  OIF  was  that,  “Operational  protection  must  be  included  throughout  the  planning 
process.”64  A  process  for  synchronizing  operational  protection,  such  as  the  one  proposed  in 
Appendix  B,  must  be  defined  for  operational  commanders  and  incorporated  into  the  JP  5-0 
series  publications  and  the  Joint  Operational  Planning  and  Execution  System  (JOPES). 

Conclusion 

This  paper  has  outlined  the  definition  of  operational  protection,  articulated  its 
importance  to  the  combatant  commander,  analyzed  what  joint  doctrine  and  other  publications 
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say  about  operational  protection,  and  recommended  actions  to  correct  deficiencies.  In  his 

article  in  the  Marine  Corps  Gazette  concerning  force  protection.  Major  Daniel  J.  Shuster, 

USMC,  correctly  points  out  that  alone,  individual  and  unsynchronized  protective  measures 

will  not  prevent  seams  in  a  theater’s  protective  posture  from  being  exploited: 

Individual  protective  measures,  hostage  awareness,  and  physical  security  technologies  will  all  serve  to  better 
safe  guard  the  lives  of  individual  soldiers,  sailors,  airmen,  and  Marines.  Alone  however,  these  measures  will 
not  prevent  another  bombing  in  Beirut  or  Saudi  Arabia,  or  ambush  of  forces  in  Mogadishu.65 

Individual  and  tactical  force  protection  actions,  even  if  executed  superbly,  are  not 
enough  to  ensure  adequate  protection  in  a  theater  of  operation.  With  so  many  components  of 
operational  protection,  they  will  not  synchronize  themselves.  Rather  it  will  take  a  deliberate 
process  to  successfully  employ  operational  protective  measures  and  associated  risk 
management  procedures  in  a  theater. 

To  achieve  the  vision  of  full  dimensional  protection,  from  which  operational  protection 
is  the  realization  of  this  concept  at  the  operational  level  of  war,  U.S.  joint  doctrine  must  define 
and  outline  the  operational  protection  process  to  achieve  an  integrated  theater  architecture,  as 
well  as  articulate  to  combatant  commanders  the  tactics,  techniques  and  procedures  to 
synchronize  the  multiple  components  of  operational  protection  to  ensure  the  protection  of  the 
friendly  COG  and  other  priority  assets.  The  operational  protection  process  recommended  in 
this  paper  will  accomplish  these  goals  by  fonnalizing  risk  management  into  the  application  of 
the  operational  protection  process,  thereby  ensuring  an  operational  commander’s  clear 
understanding  of  what  an  acceptable  level  of  risk  is  when  establishing  the  theater’s  integrated 
architecture  for  protection. 
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OUTLINES  A  JOINT  PROTECTION.  TO  DISCUSSES  OUTLINES  A  AS  AN 

PROCESS  FOR  INCLUDE  FORCE  JOINT  OPERATIONAL  OISCUSSESA 

OPERATIONAL  INCORPORATION  PROTECTION  IN  DOCTRINAL  CONSIDERATION  SUPPORTING 
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OPERATIONAL  DISCUSSES  RISK 

PROTECTION,  TO  DISCUSSES  OUTLINES  A  AS  AN 

INCLUDE  FORCE  JOINT  OPERATIONAL  DISCUSSES  A 

INCORPORATION  PROTECTION  IN  DOCTRINAL  CONSIDERATION  SUPPORTING 

OF  RISK  DETAIL  &  DISCUSSES  RISK  (BUT  NOT  COMPONENT 
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APPENDIX  B  -  PROPOSED  OPERATIONAL  PROTECTION  PROCESS 


OPERATIONAL  PROTECTION  PROCESS 


PHASES  OF  THE  OPERATION 


Planning 


THREAT 
ASSESSMENT' 


VULNERABILITY 

ASSESSMENT 


Identify 

Vulnerabilities 

and 

Determine 
High  Value  Asset 
(HVA)  LIST 


Preparation  Execution 


'  Develop  Controls  & 
Make  Risk  Decisions^ 


ESTABLISH 
PROTECTIVE  , 
MEASURES 
(ACTIVE  /  PASSIVE) 


INCIDENT 
RESPONSE  I 
MEASURES 


CONSEQUENCE 

►  management 

MEASURES 


Establish  Priorities  of  Protection 
for  High  Value  Assets  (HVAs) 
(i.e.  -  what  gets  protected,  and  what  is 
determined  acceptable  risk  for  an  asset) 


•  Plan  /  Manage  /  Oversee  Operational  Protection  Process 
■  Synchronize  components  of  Operational  Protection  to 
achieve  synergistic  effects,  resulting  in  an  integrated 


PROVIDE 

OPERATIONAL  AIR¬ 

SPACE,  &  MISSILE 
DEFENSE 

•  Airspace  Control 

•  Aircraft  &  Cruise 
Missile  Defense 

•  Ballistic  Missile 
Defense 

•  Provide  TBM  Early 
Warning 


PROTECTION 

•COG 

•  Rear  Area  Defense 

•  Protection  of  Logistics 
Infrastructure 

•DoD  Bases  &  Facilities 

•  Designated  Civil 
Infrastructure 

•  Decontamination  of  assets 
after  NBC  attack 

•  Restoration  of  essential 


OPERATIONAL  FORCES, 

MEANS,  & 
NONCOMBATANTS 

•  Force  Protection 

•  Combating  Terrorism 

•  OPSEC 

•  Protection  of  US  Citizens  / 
Noncombatants 

•  Ground  Base  Defense 

•  Defense  against  WMD  /  NBC 

•  Individual  Protection 

•  Collective  Protection 

•  Consequence  Management 


INFORMATION 

ASSURANCE  / 

COMPUTER 

NETWORK 

DEFENSE 
•  Protection  of 
Information 
Systems 


MILITARY 

DECEPTION 

COLLECT  INTEL 

FOR  INDICATIONS 

&  WARNINGS 


MARITIME  DEFENSE 

•  Mine  Clearing 

•  Anti-Surface  Warfare 

•  Maritime  Interception 
Operations 

•  Defense  of  the  Coast  and 
Coastal  Waters 


Components  of 
Operational 
Protection 


Controls  &  Tools  for  the 
Combatant  Commander 
to  Mitigate  Risk  and 
establish  a  protection 
architecture  in  theater 


The  proposed  Operational  Protection  Process  (OPP)  is  a  synthesis  of  several  thoughts 
within,  and  outside  of,  joint  doctrine.  In  the  actual  process,  the  six  steps  outlined  in  the  top 
block  -  threat  assessment,  vulnerability  assessment,  risk  assessment,  establish  protective 
measures,  incident  response  measures,  and  consequence  management  measures  -  are  primarily 
derived  from  DoD  Instruction  2000. 16,  DoD  Antiterrorism  Standards.  However,  the  steps 
outlined  in  the  OPP  cover  a  much  broader  range  of  activities  than  those  for  just  antiterrorism. 
The  thoughts  on  risk  management,  step  three  of  the  process,  are  largely  derived  from  Air  Land 
Sea  Application  Center’s,  Risk  Management,  and  should  be  codified  into  the  operational 
protection  process,  as  well  as  into  joint  doctrine.  The  Operational  Protection  Cell  (OPC) 
concept,  depicted  in  the  middle  section  of  the  diagram,  is  also  taken  from  Risk  Management 
and  has  been  modified  based  on  the  real  world  experiences  of  the  first-ever  implementation  of 
an  OPC  by  the  CFLCC  in  Operation  Iraqi  Freedom.  The  components  of  operational 
protection,  the  bottom  block  of  the  diagram,  are  derived  from  two  sources  -  the  Universal 
Joint  Task  List  (UJTL)  and  Dr.  Vego’s,  Operational  Warfare. 
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Key  thoughts  concerning  the  Operational  Protection  Process: 

•  In  support  of  the  thesis  of  this  study,  the  proposed  Operational  Protection  Process  would 
codify  a  joint  doctrinal  process  that  sufficiently  fonnalizes  risk  management  into  the 
application  of  the  operational  protection  process,  thereby  ensuring  an  operational 
commander’s  clear  understanding  of  what  an  acceptable  level  of  risk  is  when  determining  his 
forces’  operational  protection  posture  (see  Risk  Management  steps  above:  developing  controls 
mitigates  the  risk  by  employing  measures  and  forces  to  counter  the  threats,  and  by 
“establishing  priorities  for  High  Value  Assets,”  the  operational  commander  effectively  makes 
risk  decisions). 

•  Protection  of  the  friendly  COG  is  an  essential  element  /  outcome  of  the  process. 

•  The  Operational  Protection  Cell  (OPC)  is  the  core  of  the  proposed  Operational  Protection 
Process.  The  OPC  is  responsible  for  integrating  the  process,  shown  in  the  top  block,  with  the 
components  of  operational  protection,  outlined  in  the  bottom  block,  throughout  all  phases  of 
the  operation  -  planning,  preparation,  and  execution.  The  OPC  acts  as  the  controlling 
mechanism  between  the  process  and  the  employment  of  the  components  (controls,  tasks,  or 
forces)  and  should  continually  report  to  the  operational  commander.  By  synchronizing  the 
process  and  the  components,  the  OPC  will  be  able  to  achieve  synergistic  effects  in  the 
protective  posture  of  the  theater. 

•  Step  1 :  the  threat  assessment  completed  in  step  1  of  the  process  will  feed  the  “Identify 
Hazards”  and  “Assess  Hazards”  steps  of  the  risk  management  process,  which  is  step  three  of 
the  Operational  Protection  Process. 

•  Step  2:  the  vulnerability  assessment  must  identify  seams  that  an  adversary  could  exploit 
and  will  lead  to  a  High  Value  Asset  (HVA)  list,  which  are  those  assets  within  the  theater  of 
operations  that  are  of  importance  for  the  successful  accomplishment  of  the  mission.  Many  of 
the  HVAs  will  be  derived  from  the  friendly  critical  strength  assessment  completed  during  the 
operational  design.  To  use  a  parallel,  the  HVA  list  is  very  similar  to  the  Critical  Asset  List 
(CAL)  that  the  JFACC  develops  -  this  list  detennines  those  assets  within  theater  that  are 
important  to  the  operation  and  may  warrant  air  and  missile  defense  protection.  At  this  step  in 
the  process,  this  list  is  not  prioritized;  rather  it  is  simply  a  comprehensive  listing  of  those 
HVAs  that  exist  within  the  theater. 

•  Step  3:  application  of  the  risk  management  process  occurs  during  this  step.  Critical  to  the 
overall  operational  protection  process  is  step  three  of  the  risk  management  process  -  develop 
controls  and  make  risk  decisions.  When  developing  controls,  the  Operational  Protection  Cell 
draws  from  the  various  components  of  operational  protection,  outlined  in  the  bottom  block  of 
the  diagram.  These  components,  or  controls,  are  tools  and  tasks  that  the  operational 
commander  has  at  his  disposal  to  employ  and  implement  within  the  theater.  The 
implementation  of  these  components  will  enhance  protection  of  HVAs,  thereby  mitigating  risk 
to  the  overall  operation.  The  second  part  of  this  step,  making  risk  decisions,  takes  into  account 
the  guidance  that  the  operational  commander  has  established  on  how  much  risk  he  is  willing  to 
accept.  Also,  when  making  risk  decisions,  the  OPC  must  determine  the  recommended  HVA 
priority  list  for  the  commander’s  approval.  By  prioritizing  the  HVA  list,  the  commander  can 
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determine  exactly  where  he  is  taking  risks  because  there  are  never  enough  protection  assets  for 
everything,  and  the  operational  commander  must  balance  protecting  the  force  with  applying 
sufficient  combat  power  to  accomplish  the  mission.  For  the  methodology  of  prioritizing  the 
HVA  list,  the  application  of  the  Air  and  Missile  Defense  community’s  Defended  Asset  List 
(DAL)  process  is  recommended.  In  this  process,  a  matrix  is  developed  by  listing  the  HVAs  on 
the  vertical  axis,  and  assessing  them  against  four  criteria  (placed  on  the  horizontal  axis  of  the 
matrix)  -  criticality,  vulnerability,  recuperability,  and  threat.  Criticality  is  the  assessment  of 
how  critical  the  asset  is  to  the  accomplishment  of  the  mission.  For  example,  the  friendly  COG 
would  be  the  most  critical  HVA.  Vulnerability  is  an  assessment  of  how  easy  it  would  be  to 
attack  an  asset.  Some  assets  within  the  theater  are  “softer”  targets  than  others,  meaning  that 
they  are  organically  not  as  well  protected.  Recuperability  is  an  assessment  of,  if  the  target  was 
attacked  and  damaged,  how  easy  would  it  be  to  reconstitute  the  functions  and  capabilities  of 
that  asset.  The  assessment  of  threat  deals  with  detennining  those  targets  the  enemy  is  most 
likely  to  target.  By  assigning  numeric  values  and  establishing  a  scale,  each  HVA  can  be 
assessed  against  the  four  criteria  described  above.  The  matrix  will  result  in  a  numeric 
prioritization  of  the  HVAs,  which  the  OPC  can  further  refine  and  present  it  to  the  commander 
for  approval.  This  process  will  enable  the  OPC  to  make  thoughtful  and  calculated 
recommendations  on  which  assets  receive  how  much  protection. 

•  Step  4:  step  four  of  the  risk  management  process  (implement  controls)  flows  into  step  four 
of  the  operational  protection  process  (establish  protective  measures).  The  first  three  steps  of 
the  OPP  are  conducted  during  the  “planning”  phase  of  the  operation,  but  this  step  of 
establishing  protective  measures  marks  the  beginning  of  the  preparation  phase  of  the  operation 
and  entails  the  physical  employment  of  the  components  of  operational  protection  to  HVAs.  At 
the  conclusion  of  this  step  in  the  process,  the  operational  commander  has  approved  the 
prioritized  HVA  list  and  approved  the  recommended  employment  of  operational  protection 
components  to  specific  HVAs.  Also,  the  operational  commander  has  a  clear  understanding  of 
what  risks  he  is  accepting  across  the  theater.  The  implementation  of  protective  measures  not 
only  includes  the  physical  employment  of  those  operational  protection  components  available, 
but  also  includes  those  passive  defense  measures  that  the  operational  commander  disseminates 
as  guidance.  Step  four  of  the  operational  protection  process  is  complete  when  the  prioritized 
and  integrated  protection  architecture  is  established  within  the  theater  of  operations,  and  the 
protection  of  the  friendly  COG  is  established. 

•  Steps  5  and  6:  incident  response  measures  and  consequence  management  measures  occur 
during  the  execution  phase  of  the  operation,  once  an  incident  has  occurred.  While  an  essential 
part  of  the  operational  protection  process,  these  areas  fall  outside  the  scope  of  this  study. 
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